add explicit logging to a file for operations that have a permanent effect. Make updating group members during login async.